
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.mft
File: 300F45147A453EAC44093ADD500AE22112A608EF.mft (raw, json)
Hash identifier: XGyuNdeLenjg5wBzdgz1RGDGyLFA+qfuknQiDgRJvJc=
Subject key identifier: AD:3F:50:88:22:E9:D9:18:F0:FC:05:3C:E0:F2:DF:91:2D:20:07:E9
Authority key identifier: 30:0F:45:14:7A:45:3E:AC:44:09:3A:DD:50:0A:E2:21:12:A6:08:EF
Certificate issuer: /CN=300F45147A453EAC44093ADD500AE22112A608EF
Certificate serial: 4D7FF02C98821FA36C7CB84AE5BE2D994E67682E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/300F45147A453EAC44093ADD500AE22112A608EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.mft
Manifest number: BC
Signing time: Fri 25 Sep 2026 19:23:54 +0000
Manifest this update: Fri 25 Sep 2026 19:18:54 +0000
Manifest next update: Sat 26 Sep 2026 21:53:54 +0000
Files and hashes: 1: 323430313a616632303a3a2f33322d3438203d3e20323038323233.roa (hash: SJLqTCpMg36u4dcbjaO1DKDyNJOj8l4ibq7nsR8wQNc=)
2: 300F45147A453EAC44093ADD500AE22112A608EF.crl (hash: qKTbRcBiQb3btq/RDqp6wgVNgH9XbBf/v3CkpojPHkc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.crl
rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/300F45147A453EAC44093ADD500AE22112A608EF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 21:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:7f:f0:2c:98:82:1f:a3:6c:7c:b8:4a:e5:be:2d:99:4e:67:68:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300F45147A453EAC44093ADD500AE22112A608EF
Validity
Not Before: Sep 25 19:18:54 2026 GMT
Not After : Sep 26 21:53:54 2026 GMT
Subject: CN=AD3F508822E9D918F0FC053CE0F2DF912D2007E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:6a:06:32:0f:e2:da:da:d6:17:43:02:4c:
38:80:b6:00:5f:8f:be:07:20:17:51:a2:cd:4e:e9:
f3:25:47:f0:f2:87:b9:fb:e7:be:97:b9:23:4c:f7:
5a:05:b3:04:83:00:75:6c:17:06:f6:45:c2:38:74:
c6:37:42:7a:8c:46:2d:49:1a:5d:1d:78:ae:35:d6:
d5:36:05:15:78:ec:59:0c:f2:b5:4e:2c:3b:b1:3c:
c5:5d:60:e6:ff:10:a9:90:6c:ee:05:2c:17:92:2a:
04:51:ad:a2:a2:49:14:d4:e9:a9:02:97:e7:ee:de:
3b:e9:ba:2e:31:be:19:20:53:31:fd:fc:b9:22:83:
47:e9:ff:e9:09:d6:0e:e6:37:5d:38:e6:56:a5:c7:
e7:87:d0:c8:46:76:72:3f:25:0a:9c:06:b2:c3:94:
5c:09:ee:41:dc:1d:1f:f0:0a:de:24:d4:71:b7:c9:
f1:90:dd:a5:8e:74:a1:5e:c3:79:92:5d:70:22:01:
ad:64:2b:5f:f0:19:bd:1c:e3:6f:9e:d6:cd:63:95:
a6:1d:7c:20:44:c5:01:40:a1:b7:51:9d:fa:c7:5d:
9a:de:42:36:ec:9f:1d:18:81:49:a3:a6:33:41:2e:
a2:61:dc:35:fb:6b:97:42:5c:68:4f:8a:e0:65:53:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:50:88:22:E9:D9:18:F0:FC:05:3C:E0:F2:DF:91:2D:20:07:E9
X509v3 Authority Key Identifier:
keyid:30:0F:45:14:7A:45:3E:AC:44:09:3A:DD:50:0A:E2:21:12:A6:08:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/300F45147A453EAC44093ADD500AE22112A608EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2d:a6:aa:3b:ba:5b:91:d1:81:08:3d:69:52:81:d4:78:27:
be:d6:03:03:1c:8f:dc:1c:ae:93:ff:89:d2:17:12:a8:7f:9d:
2d:fa:eb:88:6e:8a:f3:75:67:8b:90:b0:0e:ad:98:09:6b:45:
2c:d9:87:f9:d3:42:2a:f6:8a:b1:61:d3:98:5d:5e:08:52:d8:
0a:2e:fb:f6:8c:71:b6:c5:ca:28:b0:ef:9e:7d:ba:e5:55:ac:
03:75:c3:53:46:96:d2:f1:8a:de:e6:0d:3c:77:c2:03:a7:4a:
ab:b0:5a:2d:da:c5:28:fe:dc:b5:c7:fd:c5:a4:8c:e2:0f:c0:
46:59:f1:78:9f:c5:7f:81:38:f5:27:c9:6c:3c:cf:cb:28:15:
7d:40:eb:ba:d1:bc:a2:9f:ad:9e:d2:74:fa:98:6b:64:06:eb:
cf:18:f8:f9:d4:b3:07:e0:c5:dc:44:4a:d1:cd:f7:a9:a8:ac:
1a:ca:72:fd:97:1b:ea:e7:df:7a:32:1e:76:29:32:30:f1:69:
d6:44:41:98:2a:db:88:bc:fc:f4:cc:06:c1:07:40:a0:eb:a7:
fa:2c:cb:a7:cd:a8:c5:77:77:11:87:dd:8c:4f:43:a9:e9:ac:
4a:12:7b:a4:b1:07:d6:fb:98:b4:db:e7:d2:58:d8:db:ab:61:
06:1a:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:49:43 2026 by rpki-client